You start to use AWS Certificate Manager to manage certificates. And some existing certificates in IAM will not be used or will be replaced by the new ones in ACM. You just create a new public server certificate for a domain name called www.example.com. However, the status of the certificate is “Pending validation”. Which option can be used by ACM as a validation approach? (Select TWO.)

Answer options:

A.ACM sends an SMS to the registered phone number of the domain name. A user can validate it by clicking the validation URL.
B.Use DNS to validate the domain ownership. You can insert ACM generated CNAME records into your DNS database.
C.If the domain name is registered by Route53, no validation action is required. Just wait for a while, and it will be automatically validated.
D.ACM sends emails to the contact addresses of the domain name. You can validate the domain owner in the email.
E.If the domain name is registered by Route53, a Pending Validation icon is generated in the Registered Domains. Just click the Pending Validation icon, and ACM will modify the certificate status to Issued.

Correct Answer – B, D
Refer to the below approaches on how to validate pending certificates in ACM:
https://docs.aws.amazon.com/en_pv/acm/latest/userguide/gs-acm-validate-dns.html
https://docs.aws.amazon.com/en_pv/acm/latest/userguide/gs-acm-validate-email.html
Option A is incorrect: Because ACM does not send SMS to validate if a user owns the domain name or not.
Option B is CORRECT: User can choose either DNS validation or Email validation as below:
Option C is incorrect: Because domain names registered through Route53 still need to be validated.
Option D is CORRECT: The below email will be received as an email validation:
Option E is incorrect: Because there is no Pending Validation icon. You have to use either DNS validation or Email validation.